"The tool itself consists of 12 questions about the type of data, number of records compromised, cause of the breach, internal communications resources and degree of preparedness for such an emergency. Algorithms translate answers to these questions into dollar figures so clients can estimate costs their costs in advance."